Specifying The Match Order Of Acl Rules; Configuration Procedure; Configuration Example; Configuring Time Ranges - H3C S7500 Series Operation Manual

Operation Manual – ACL
H3C S7500 Series Ethernet Switches
The current acl mode: link-based.

1.3 Specifying the Match Order of ACL Rules

The acl match-order { config | auto } command is used to set the matching order of
ACL rules when they are configured. The acl order command is used to set the
matching order of ACL rules in the case that they are applied to a port. The S7500
Switches support three matching orders of ACL rules applied to a port: depth-first,
first-config-first-match, and last-config-first match. You can specify one of the three
orders.

1.3.1 Configuration Procedure

Table 1-2 Set the matching order of ACL rules sent to a port
To do...
Enter system view
Set the matching
order of the
configured ACL
rules sent to a port
Display the traffic
flows ACL mode

1.3.2 Configuration Example

# Specify the matching order of ACL rules applied to a port as first-config-first-match.
<H3C> system-view
[H3C] acl order first-config-first-match
[H3C] display acl order
the current order is first-config-first-match

1.4 Configuring Time Ranges

The time range configuration tasks include configuring periodic time ranges and
configuring absolute time ranges. A periodic time range recurs periodically on the day
or days of the week, while an absolute time range takes effect only in a period of time
(the start time to the end time) and does not recur.
Use the command...
system-view
acl order { auto |
first-config-first-match |
last-config-first-match }
display acl order
1-5
Chapter 1 ACL Configuration
Remarks
—
Required
By default, the configured ACL
rules sent to a port match in the
depth-first order, that is, the
auto mode.
Optional
The display command can be
executed in any view